Venafi / blueprint-securesoftwarepipelineLinks
For engineers and security teams driving fast and secure software supply chains
☆85Updated 2 years ago
Alternatives and similar repositories for blueprint-securesoftwarepipeline
Users that are interested in blueprint-securesoftwarepipeline are comparing it to the libraries listed below
Sorting:
- This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.☆139Updated 3 years ago
- Open Source Software Secure Supply Chain Framework☆239Updated 3 years ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆179Updated last month
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆60Updated 2 years ago
- Documenting your Threat Models with HCL☆453Updated last month
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆223Updated 8 months ago
- OWASP Foundation Web Respository☆56Updated 4 months ago
- Count distinct contributor of Snyk watched repos across several SCM☆32Updated 2 weeks ago
- A collection of DoD and Federal Government Cloud Computing Resources☆49Updated 4 years ago
- A reading list for software supply-chain security.☆366Updated 3 years ago
- ☆115Updated 5 months ago
- A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.☆204Updated 2 years ago
- Useful scripts, Docker images, docker-compose apps, and Terraform modules.☆149Updated 3 weeks ago
- ☆124Updated 8 months ago
- GitHub action to scan container images with Palo Alto Networks' Prisma Cloud☆58Updated last month
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆105Updated 2 years ago
- The Amazon Elastic Kubernetes Service (EKS) Creation Engine (ECE) is a Python command-line program created by the Lightspin Office of the…☆42Updated 3 years ago
- ☆254Updated last week
- Generate a score for your sbom to understand if it will actually be useful.☆237Updated last year
- CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.☆292Updated last year
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆513Updated last week
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- Cloud Security Posture security policies☆32Updated 2 months ago
- ☆16Updated last year
- A tool to create, transform and attest VEX metadata☆172Updated last week
- Threat model for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach☆157Updated 2 years ago
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆215Updated 3 months ago
- Compares and analyzes GCP IAM roles.☆78Updated 10 months ago
- Rapidly apply hundreds of security controls in Azure☆183Updated 9 months ago
- Open Cloud Security Posture Management Engine☆342Updated 3 years ago